Your methods are correct and working fine. Since your have caching enabled for these files most likely http://htaccesstools.com/test-hotlink-protection
is showing you cached snapshot of the image. If you really want to test it create a html file on your localhost or some other host other than mydomain.p.ht
host and include this line (replace /images/home.gif` with the path of an actual gif file):
<img border="0" src="http://mydomain.p.ht/images/home.gif">
And see if image shows up in browser or not. If you have Firbug network tab opened while doing this you should see Forbidden 403 status for above image.